Messaging Gateway

I got some spam messages that SBG7.7 did not catch, I thought maybe I can use the compliance rule to filter it , but it did not work ..
Someone have any idea for this situation ?

Thanks a lot.
spam sample <--

my pattern & my compliance rule :

my filter compliance :
Apply To:

Inbound messages
Conditions:
    (If text in Message header to  part of the message matches pattern "Special Chart" )
or
    (If text in Message header from part of the message matches pattern "Special Chart" )
or
    (If text in Message header reply-to part of the message matches pattern "Special Chart" )
or
  (If text in Message header subject part of the message matches pattern "Special Chart" )
Actions:
Hold message in Spam Quarantine


Jerry

 special character pattern1 : (▅|★|█|●|↖|↗|↙|↘|◣|◥|◢|◤)
it works !it can match that if  from/to/reply-to/subject header have "only one" special character

special character pattern2:
((▅|★|█|●|↖|↗|↙|↘|◣|◥|◢|◤).+(▅|★|█|●|↖|↗|↙|↘|◣|◥|◢|◤)|(▅|★|█|●|↖|↗|↙|↘|◣|◥|◢|◤)(▅|★|█|●|↖|↗|↙|↘|◣|◥|◢|◤))

Did NOT work !! I expect  the pattern2 will catch that if  from/to/reply-to/subject header have "two or more" special character ,BUT it fail ,I really did test the regluar use other Regex Tester (http://www.dotnet2themax.com/blogs/fbalena/PermaLink,guid,13bce26d-7755-441e-92b3-1eb5f9e859f9.aspx)

... 
 Any idea about this ?
 

Thanks for any help and suggestions.

Regards

Jerry

Hi George,

I can't really provide any assistance with your rules here, but my take on this would be send the messages to Symantec in hopes that they'll be able to write rules to look after these for you, here is a doc talking about the submission process:

http://service1.symantec.com/support/ent-gate.nsf/854fa02b4f5013678825731a007d06af/72007e542947aa388825734c00828c35?OpenDocument

Cheers,

Kevin